6 ms·

> would be a potential target of regulators looking to establish precedents of enforcement with a big name. Shouldn't law apply equally to everyone? One could

> would be a potential target of regulators looking to establish precedents of enforcement with a big name. Shouldn't law apply equally to everyone? One could have thought that setting an example "to show them!" wouldn't have occurred in a civilised country.

bearcobra 8y ago
In a world of limited resources, it makes sense that regulators would pursue enforcement against entities that impact a large number of people.
- kodablah 8y ago
  In such a world, it would make more sense to limit the scope of the law until enforcement can catch up. Minimally enforced laws that are enforced subjectively are problematic regardless of why.
  - Tyrek 8y ago
    Are you suggesting that the US government suspend income tax while they hire enough people in the IRS to go through every individual's tax return?
    - xevb3k 8y ago
      Minimal enforcement can be used to make everyone a criminal. You then selectively apply the law against people you don’t like. Taxation (I would hope) is not minimally enforced.
    - kodablah 8y ago
      No, I'm suggesting they don't add any more compliance rules with new punishments unless they staff up.
s73v3r_ 8y ago
Regulators only have so many hours in the day. Prioritizing high visibility infringers can persuade lower visibility infringers to get into compliance.
- merinowool 8y ago
  Not sure how they could persuade if they won't go after lower visibility infringers? I can't follow your logic.
  - EpicEng 8y ago
    No one said "they won't go after small timers". Hitting the big players hard makes everyone wary of violating and they will absolutely catch some small fish as well. It's just silly to expect any enforcement body to go after everyone equally. It doesn't even make sense; company A has data on 1.5B people, company B has data on 27 people and the owner's mother. Why would you go after B before A?
    - danpalmer 8y ago
      They have said this. a) they have said they don't want to punish companies for the sake of it, they want to use it as an incentive to fundamentally change the approach to the handling of user data. This means not suing tiny companies for more money than they are worth. b) they have said that the standards will roughly increase with the size of the company and resources it has. A company with 27 users (and few employees) would not be expected to have a data protection officer, or many of the control processes that a company with data on 1.5B people.
      - zerostar07 8y ago
        I think everyone is talking about the UK 's ICO, which is just 1 of the 28. We have heard nothing from others and its best not to make assumptions - the ICO may be following different rules in a year.
        8y ago
celticninja 8y ago
https://jacquesmattheij.com/gdpr-hysteria https://jacquesmattheij.com/gdpr-hysteria Setting an example is how the US regulators work, not so much the EU.
YeGoblynQueenne 8y ago
It's a union, not a country and it definitely won't go after big players with any kind of prejudice. It will go after those who flaunt the regulation, big and small. Because it's the EU and not some other Union.

bearcobra 8y ago

In a world of limited resources, it makes sense that regulators would pursue enforcement against entities that impact a large number of people.

kodablah 8y ago
In such a world, it would make more sense to limit the scope of the law until enforcement can catch up. Minimally enforced laws that are enforced subjectively are problematic regardless of why.
- Tyrek 8y ago
  Are you suggesting that the US government suspend income tax while they hire enough people in the IRS to go through every individual's tax return?
  - xevb3k 8y ago
    Minimal enforcement can be used to make everyone a criminal. You then selectively apply the law against people you don’t like. Taxation (I would hope) is not minimally enforced.
  - kodablah 8y ago
    No, I'm suggesting they don't add any more compliance rules with new punishments unless they staff up.

s73v3r_ 8y ago

Regulators only have so many hours in the day. Prioritizing high visibility infringers can persuade lower visibility infringers to get into compliance.

merinowool 8y ago
Not sure how they could persuade if they won't go after lower visibility infringers? I can't follow your logic.
- EpicEng 8y ago
  No one said "they won't go after small timers". Hitting the big players hard makes everyone wary of violating and they will absolutely catch some small fish as well. It's just silly to expect any enforcement body to go after everyone equally. It doesn't even make sense; company A has data on 1.5B people, company B has data on 27 people and the owner's mother. Why would you go after B before A?
  - danpalmer 8y ago
    They have said this. a) they have said they don't want to punish companies for the sake of it, they want to use it as an incentive to fundamentally change the approach to the handling of user data. This means not suing tiny companies for more money than they are worth. b) they have said that the standards will roughly increase with the size of the company and resources it has. A company with 27 users (and few employees) would not be expected to have a data protection officer, or many of the control processes that a company with data on 1.5B people.
    - zerostar07 8y ago
      I think everyone is talking about the UK 's ICO, which is just 1 of the 28. We have heard nothing from others and its best not to make assumptions - the ICO may be following different rules in a year.
      - 8y ago

celticninja 8y ago

https://jacquesmattheij.com/gdpr-hysteria https://jacquesmattheij.com/gdpr-hysteria Setting an example is how the US regulators work, not so much the EU.

YeGoblynQueenne 8y ago

It's a union, not a country and it definitely won't go after big players with any kind of prejudice. It will go after those who flaunt the regulation, big and small. Because it's the EU and not some other Union.